Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB2F8506CB811EE937F39574AD9E6FC.roa
File: DAB2F8506CB811EE937F39574AD9E6FC.roa (raw, json)
Hash identifier: VQP9+Dm1o9Pe8Ngg9Q8Pvb3ZCL1TDFnLOw/jt6l06FM=
Subject key identifier: 5A:28:45:A7:61:40:85:A4:29:03:E0:B4:68:01:6C:5F:A0:64:EF:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4618
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB2F8506CB811EE937F39574AD9E6FC.roa
Signing time: Tue 17 Oct 2023 06:46:09 +0000
ROA not before: Tue 17 Oct 2023 06:46:06 +0000
ROA not after: Tue 22 Oct 2024 06:46:06 +0000
asID: 133585
IP address blocks: 154.84.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17944 (0x4618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 06:46:06 2023 GMT
Not After : Oct 22 06:46:06 2024 GMT
Subject: CN=652e2db1-eb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:5f:8c:32:25:91:16:3d:2e:75:0e:8e:a2:
d2:44:45:5b:32:41:e5:01:f6:ea:d8:59:5e:08:63:
e0:0d:1a:5c:1f:25:31:46:c2:ea:bd:71:d7:71:89:
a9:df:24:ac:59:b9:b7:66:83:17:4a:86:87:2d:95:
e3:4a:0b:16:61:15:ef:98:96:37:8a:6b:1b:54:2c:
7b:3d:10:18:2c:16:9a:78:52:f5:fa:54:13:d8:87:
a5:83:08:5a:01:3d:e9:00:e4:e6:6a:24:7b:74:e9:
86:d8:da:63:7e:1f:86:29:2c:fa:7f:1f:0b:98:7f:
48:b2:ee:d7:52:2e:ce:9b:0c:e2:49:cc:88:04:c6:
13:ec:9f:2c:e1:f4:78:bd:76:2a:13:b4:2d:e0:06:
8f:63:17:e9:ae:da:8c:57:5e:71:3a:00:fb:b8:a2:
01:14:16:00:ed:72:b7:73:10:ec:17:82:5d:1c:30:
5a:b4:84:d1:10:51:dd:af:f3:ad:d6:f8:e3:31:bc:
5c:b4:ed:80:a6:77:a1:43:d5:c0:03:91:bd:d0:bd:
09:67:d3:0a:ca:34:9b:1e:00:da:4d:bd:af:9c:98:
af:67:35:d5:ab:39:0a:4d:02:cd:48:22:2e:63:8a:
64:90:73:9b:99:c7:aa:5d:19:63:ee:e1:e0:23:51:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:28:45:A7:61:40:85:A4:29:03:E0:B4:68:01:6C:5F:A0:64:EF:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB2F8506CB811EE937F39574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e9:02:fa:41:11:f0:8b:55:bc:87:72:ab:03:2c:42:46:74:
62:c6:5b:83:27:7a:2d:a6:ef:ab:d9:60:bf:3f:33:fe:55:e3:
ef:02:cc:26:0b:c5:01:66:d3:db:85:b2:81:fe:22:10:47:c6:
ef:92:bd:f7:15:9d:4b:7a:84:df:1c:8b:d5:34:70:fa:38:ea:
38:d0:2f:f1:94:42:1c:ff:9b:f3:0e:3d:1d:c5:e1:cf:b9:0c:
76:58:3c:08:4b:ef:cc:ce:be:da:f0:5a:f3:68:64:6c:c5:22:
bc:bd:6f:5a:18:95:09:6b:57:4e:33:a8:43:c2:65:fc:8b:2a:
eb:df:c0:9d:54:59:bf:da:64:ce:a8:d8:3a:e0:83:34:bd:58:
34:c8:30:79:b7:c0:9a:18:89:7e:ad:e5:e0:fb:80:bf:f3:2e:
a3:51:0d:3b:0e:a9:ab:f2:8d:d9:7d:09:17:cd:a1:8a:cd:e2:
ab:f9:d5:6d:0d:f2:99:34:9e:17:ec:22:bc:76:03:55:e9:bf:
62:8d:0a:e0:39:7f:c8:8a:f2:d9:b5:cd:c6:7e:fb:8b:dc:2e:
e2:d4:29:db:b0:0b:aa:df:f8:22:e1:d9:60:d2:7b:0b:ae:5c:
25:57:99:d1:2e:ca:57:d0:61:86:90:fb:e5:1a:07:ec:d1:5d:
c9:5a:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org